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In the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of the Claims 

1-33. Canceled 

34. (Currently Amended) A method of authenticating a hardware token for operation 
with a host, comprising: 

retrieving a value X from a memory separate from the a hardware t oke n, the memory 
accessible to an authenticating entity, the value X generated from a non- varying computer 
fingerprint F of [[the]] a host and an identifier P securing access to the token, wherein the host 
fingerprint F is computed at least in part from non-varying host information C based on a unique 
characteristic of the host; 

regenerating the same identifier valu e P at least in part from the value X and the 
fingerprint F; and 

transmitting the regenerated identifier P to the token to authenticate the token for 
operation with the host. 

35. Canceled 

36. (Currently Amended) The method of claim 34, wherein the hest-fingerprint F is 
computed at least in part from the host information C and a non-varying server specific value V. 

37. (Currently Amended) The method of claim 34, wherein the fees* fingerprint F is 
computed at least in part from the host information C, a non-varying server specific value V and 
a non-varying string Z. 

38. (Original) The method of claim 34, wherein the value X is computed in the token. 
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39. (Original) The method of claim 34, wherein the value X is computed according to 
X =/(P, F)> wherein/(P> F) is a reversible function such tbat/(/"(P, F), F) = P. 

40. (Original) The method of claim 39, wherein / (P, F) comprises P XOR F. 

41 . (Original) The method of claim 34, wherein the value X is further computed at 
least in part from a user identifier U. 

42. (Original) The method of claim 4 1 , wherein the value X is computed according to 
X =/(P, U, F), wherein/(P, U, F) is a reversible function such that/(/XP, U, F), U, F) - P. 

43. (Original) The method of claim 42, wherein/(P, U, F) is P XOR U XOR F. 

44. (Currently Amended) The method of claim 34, wherein: 

the authorizing authenticating entity is [[a]] the host computer^ communicatively 
coupleable to the token; and 

the value X is stored in the host computer. 

45-48. Canceled 

49. (Currently Amended) An apparatus for authenticating a hardware token for 
operation with a host, comprising: 

means for retrieving a value X from a memory separate from the a hardware token , the 
memory accessible to an authenticating entity, the value X generated from a non-varying 
computer fingerprint F of [[the]] a host and an identifier P securing access to the token, wherein 
the best fingerprint F is computed at least in part from non-varying host information C based on 
a unique characteristic of the host; 

means for regenerating the same identifier value P at least in part from the value X and 
the fingerprint F; and 

means for transmitting the regenerated identifier P to the token to authenticate the token 
for operation with the host. 
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50. Canceled 

5 1 . (Currently Amended) The apparatus of claim 49, wherein the feast fingerprint F is 
computed at least in part from the host information C and a non- varying server specific value V, 

52. (Currently Amended) The apparatus of claim 49, wherein the host fingerprint F is 
computed at least in part from the host information C, a non- varying server specific value V and 
a non- varying string Z. 

53. (Original) The apparatus of claim 49 5 wherein the value X is computed in the 

token. 

54. (Original) The apparatus of claim 49, wherein the value X is computed according 
to X -/(P, F),wherein/(P, F) is a reversible function such that/(f(P, F), F) = P. 

55. (Original) The apparatus of claim 54, wherein / (P, F) comprises P XOR F. 

56. (Original) The apparatus of claim 49, wherein the value X is further computed at 
least in part from a user identifier U. 

57. (Original) The apparatus of claim 56, wherein the value X is computed according 
to X =/(P, U, F) .wherein /(P, U, F) is a reversible function such that/(f(P, U, F), U, F) = P. 

58. (Original) The apparatus of claim 57, wherein/(P, U, F) is P XOR U XOR F. 

59. (Currently Amended) The apparatus of claim 49, wherein: 

the authorizing authenticating entity is [[a]] the host computer., communicatively 
coupleable to the token; and 

the value X is stored in the host computer. 
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60-63. Canceled 

64. (Currently Amended) An apparatus for authenticating a hardware token for 
operation with a host, the apparatus comprising a processor and a m e mory computer readable 
storage medium storing instructions for performing steps comprising th e steps of : 

retrieving a value X from a memory separate from the a hardware t oke n, the memory 
accessible to an authenticating entity, the value X generated from a non- varying computer 
fingerprint F of [[the]] a host and an identifier P securing access to the token, wherein the host 
fingerprint F is computed at least in part from non- varying host information C based on a unique 
characteristic of the host; 

regenerating the same identifier valu e P at least in part from the value X and the 
fingerprint F; and 

transmitting the regenerated identifier P to the token to authenticate the token for 
operation with the host, 

65. Canceled 

66. (Currently Amended) The apparatus of claim 64, wherein the host fingerprint F is 
computed at least in part from the host information C and a non-varying server specific value V. 

67. (Currently Amended) The apparatus of claim 64, wherein the best fingerprint F is 
computed at least in part from the host information C, a non- varying: server specific value V and 
a non- varying string Z. 

68. (Original) The apparatus of claim 64, wherein the value X is computed in the 

token. 

69. (Original) The apparatus of claim 64, wherein the value X is computed according 
to X =/(P, F), wherein/(P, F) is a reversible function such that/(f(P, F), F) - P. 

70. (Original) The apparatus of claim 69, wherein / (P, F) comprises P XOR F. 
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71 . (Original) The apparatus of claim 64, wherein the value X is further computed at 
least in part from a user identifier U. 

72 . (Original) The apparatus of claim 71 , wherein the value X is computed according 
to X - f (P, U, F) >wherein/(P, U, F) is a reversible function such that/(f (P 5 U, F), U, F) = P. 

73 . (Original) The apparatus of claim 72, wherein/(P, U, F) is P XOR U XOR F. 

74. (Currently Amended) The apparatus of claim 64, wherein: 

the authorizing authenticating entity is [[a]] the host computer^ communicatively 
coupleable to the token; and 

the value X is stored in the host computer. 

75-78. Canceled 
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